In other #enshittification news… Recently filling out the tuition contract for my son for 12th grade, I discovered that #Blackbaud is now imposing a fee for direct debit payments. There was previously no fee.
There's no fee for mailing a paper check, which you can do for free through most banks nowadays.
It costs Blackbaud far more to process a paper check than a direct debit.
🧵1/3

I paid tuition for my kids school today. (wish we were public: #nyc #school system is messed up;dont want to discuss why here.)

#blackbaud is the payment system. They finagled a way to charge us $70 in fees because they didn't notify me until after assessed date that they had a problem charging my CC.

seems predatory

That led me down the rabbit hole-bad guy enablers:
https://techcrunch.com/2022/06/02/social-good-cloud-provider-blackbaud-takes-millions-from-the-nra/

data breach helpers:
https://www.ftc.gov/news-events/news/press-releases/2024/05/ftc-finalizes-order-blackbaud-related-allegations-firms-security-failures-led-data-breach

Curious about threads here that give details on them

'Social good' cloud provider Blackbaud has a loyal customer in the NRA | TechCrunch

Update: Two weeks after this article was published, Blackbaud contacted TechCrunch to dispute it, providing information I had asked about days before

TechCrunch

FTC orders Blackbaud to increase cybersecurity after data breach back in 2020. Blackbaud provides cloud-based donor data management software to non-profit organizations. They were hit by a ransomware attack that affected millions of people. According to FTC, Blackbaud had poor security practices and controls. This is just one case that shows the importance of cybersecurity and the consequences of not paying attention.

#cybersecurity #FTC #Blackbaud #ransomware

https://www.bleepingcomputer.com/news/security/ftc-orders-blackbaud-to-boost-security-after-massive-data-breach/

FTC orders Blackbaud to boost security after massive data breach

Blackbaud has settled with the Federal Trade Commission after being charged with poor security and reckless data retention practices, leading to a May 2020 ransomware attack and a data breach affecting millions of people.

BleepingComputer
FTC slams Blackbaud for "shoddy security" after hacker stole data belonging to thousands of non-profits and millions of people

Data and software services firm Blackbaud's cybersecurity was criticised as "lax" and "shoddy" by the United States Federal Trade Commission (FTC) in a damning post-mortem of the business’s February 2020 data breach.

Hot for Security
FTC slams Blackbaud for “shoddy security” after hacker stole data belonging to thousands of non-profits and millions of people - Data and software services firm Blackbaud's cybersecurity was criticised as "lax" and "sh... https://www.bitdefender.com/blog/hotforsecurity/ftc-slams-blackbaud-for-shoddy-security-after-hacker-stole-data-belonging-to-thousands-of-non-profits-and-millions-of-people/ #ransomware #databreach #guestblog #blackbaud #dataloss #ftc
FTC slams Blackbaud for "shoddy security" after hacker stole data belonging to thousands of non-profits and millions of people

Data and software services firm Blackbaud's cybersecurity was criticised as "lax" and "shoddy" by the United States Federal Trade Commission (FTC) in a damning post-mortem of the business’s February 2020 data breach.

Hot for Security
FTC slams Blackbaud for "shoddy security" after hacker stole data belonging to thousands of non-profits and millions of people

Data and software services firm Blackbaud's cybersecurity was criticised as "lax" and "shoddy" by the United States Federal Trade Commission (FTC) in a damning post-mortem of the business’s February 2020 data breach.

Hot for Security

The #FTC went after #Blackbaud for its poor security, #databreach in 2020, and incident response. A ton of provisions in the proposed order, but no monetary penalty.

Press release: https://www.ftc.gov/news-events/news/press-releases/2024/02/ftc-order-will-require-blackbaud-delete-unnecessary-data-boost-safeguards-settle-charges-its-lax

Direct link to proposed order: https://www.ftc.gov/news-events/news/press-releases/2024/02/ftc-order-will-require-blackbaud-delete-unnecessary-data-boost-safeguards-settle-charges-its-lax

I like how they included that after paying $250k to the threat actors to get them to delete the data, "The company never verified, however, that the hacker actually deleted the stolen data, according to the complaint."

#EduSec #databreach

@douglevin @funnymonkey

FTC Order Will Require Blackbaud to Delete Unnecessary Data, Boost Safeguards to Settle Charges its Lax Security Practices Led to Data Breach

South Carolina-based Blackbaud Inc.

Federal Trade Commission

Multistate Coalition of State Attorneys General Secures $49.5 Million from Cloud Company #Blackbaud for 2020 Data Breach #ransomware

https://www.lexology.com/library/detail.aspx?g=c4422b96-c5ab-4f30-ad9d-e1b0f535ef4c

Multistate Coalition of State Attorneys General Secures $49.5 Million from Cloud Company Blackbaud for 2020 Data Breach

State regulators across the country continue to increase their focus on cyber security and data privacy compliance and enforcement. For years, cloud…

Lexology
Blackbaud agrees to $49.5 million settlement for ransomware data breach

Cloud computing provider Blackbaud reached a $49.5 million agreement with attorneys general from 49 U.S. states to settle a multi-state investigation of a May 2020 ransomware attack and the resulting data breach.

BleepingComputer